New in Symfony 5.3: PasswordHasher Component

Contributed by Robin Chalas in #39802.

Hashing passwords is the process of applying a cryptographic hash function to transform the original plain text password into a different non-guessable value which is infeasible to invert. For historical reasons, Symfony uses the term “password encoding” when it should really refer to “password hashing”. This has caused some confusion for people learning Symfony, so we decided to fix this in Symfony 5.3 for once and for all. That’s why in Symfony 5.3 we’re introducing a new component called PasswordHasher. This component extracts all the existing code and features related to “password encoding” and renames it to “password hashing”. All the “encoding” features are deprecated in Symfony 5.3 and will be removed in Symfony 6.0. The API of the new hasher is similar to the previous one and slightly more close to the PHP built-in password hashing API: 1 2 3 4 5 6 7 8 9 10namespace Symfony\Component\PasswordHasher;

interface PasswordHasherInterface { public function hash(string $plainPassword): string;

public function verify(string $hashedPassword, string $plainPassword): bool;

public function needsRehash(string $hashedPassword): bool;

}

This new component can be used independently from the rest of Symfony features in any PHP application. For existing Symfony applications, the new component is included automatically when installing/updating the security package, so you don’t need to make any change in your dependencies. The impact in your application code will be low, but you might need to make some minor changes. For example, the security:encode-password command is now called security:hash-password. The security.password_encoder service is now called security.password_hasher, the UserPasswordEncoderInterface is now UserPasswordHasherInterface, etc. The main change will be in the security configuration, where you need to replace encoders by password_hashers: 1 2 3 4 5 # config/packages/security.yaml -encoders: +password_hashers: App\Entity\User: algorithm: 'auto'

                Sponsor the Symfony project.

http://feedproxy.google.com/~r/symfony/blog/~3/jVTl6wxaL6g/new-in-symfony-5-3-passwordhasher-component

Creată 4y | 29 apr. 2021, 07:20:08


Autentifică-te pentru a adăuga comentarii

Alte posturi din acest grup

Case study - Yousign: Scaling Trust with Smart, Scalable Architecture

As digital signatures become the norm in modern business, Yousign has established itself as a trusted leader across Europe. Behind its simple, intuitive interface is a powerful technical engine, handl

6 iun. 2025, 07:10:24 | Symfony
SymfonyOnline June 2025 starts next week!

Get ready for the exciting SymfonyOnline June 2025, kicking off in a few days only! There’s still time to register and join the international online Symfony conference—along with pre-conferenc

5 iun. 2025, 10:20:09 | Symfony
A Week of Symfony #961 (May 26 – June 1, 2025)

This week, Symfony released the stable version of Symfony 7.3, which includes lots of amazing new features. We also published the maintenance versions 6.4.22 and 7.2.7.

Symfony development highlights

1 iun. 2025, 08:50:16 | Symfony
New in Symfony 7.3: DX Improvements (part 2)

This is the second part of the blog post showcasing the main DX (developer experience) features introduced in Symfony 7.3. Read the first part of this blog post.

Verify URI Signatures… https://symfon

29 mai 2025, 09:10:19 | Symfony
Symfony 6.4.22 released

Symfony 6.4.22 has just been released. Read the Symfony upgrade guide to learn more about upgrading Symfony and use the SymfonyInsight upgrade reports to detect the code you will need to change in you

29 mai 2025, 09:10:19 | Symfony
Symfony 7.2.7 released

Symfony 7.2.7 has just been released. Read the Symfony upgrade guide to learn more about upgrading Symfony and use the SymfonyInsight upgrade reports to detect the code you will need to change in your

29 mai 2025, 09:10:18 | Symfony
Symfony 7.3.0 released

Symfony 7.3.0 has just been released. Check the New in Symfony 7.3 posts on this blog to learn about the main features of this new stable release; or check the first beta release announcement to get t

29 mai 2025, 09:10:17 | Symfony